[wplug] strange messages.

harrold at sage.che.pitt.edu harrold at sage.che.pitt.edu
Mon Sep 30 13:39:03 EDT 2002


hey.

one of our computers is having some issues. its been getting really slow
with really high loads. from top it appears as though there is enough free
ram/cpu, and that there shouldn't be any reason to have a load of 10+. i
was poking around in the logs and i found a lot of the following:


Sep 29 04:08:55 computername kernel: IN=eth0 OUT=eth0 SRC=136.142.89.250 DST=61.218.206.18 LEN=257 TOS=0x00 PREC=0x00 TTL=63 ID=53115 PROTO=UDP SPT=137 DPT=1025 LEN=237
Sep 30 11:53:29 computername kernel: IN=eth0 OUT=eth0 SRC=136.142.89.250 DST=218.16.125.85 LEN=48 TOS=0x00 PREC=0x00 TTL=63 ID=7854 DF PROTO=TCP SPT=4647 DPT=80 WINDOW=6432 RES=0x00 SYN URGP=0


they all seem to be originating from the same computer: 136.142.89.250 but
with different destinations. i believe this is output from iptables, which
is running on this computer to do nat for the lab.

can someone tell me what these mean?


-- 
---------------------------------------------------------------
john harrold               | "They that can give up essential  
     jmh17 at pitt.edu        |  liberty to obtain a little       
/"\                        |  temporary safety deserve neither 
\ / ASCII ribbon campaign  |  liberty nor safety."             
 X  against HTML mail      |                                  
/ \                        |  Benjamin Franklin
---------------------------------------------------------------
  "International security is not a zero-sum game. Peace, 
  security and freedom are not finite commodities - like l
  and, oil or gold - which one state can acquire at 
  another's expense."
  United Nations Secretary-General Kofi Annan





More information about the wplug mailing list